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[0001] 

[Technical Field of the Invention] The present invention relates to a personal 
information distribution management method for protecting personal information and 
activating distribution of information ,in order to get authentication, conduct marketing 
and have necessary destination information when performing on-line shopping and 
electronic commerce, and receive personal services based on personal information, 
within an inf6rmation distribution base in which a personal information possession 
subject who has at least one piece of personal information which can be disclosed and 
the personal information use subject who wants personal information to be disclosed 
from the personal information possession subject exist. 

[0011] Referring to FIG. 1, the personal information distribution management 
apparatus which is an embodiment of the present invention is configured with the 
personal information input apparatus 1, the personal information registration section 2, 
memory and the secondary storage apparatus 3, the retrieval condition input apparatus 
4, the personal information retrieval section 5, the personal information presentation 
section 6, and a display apparatus 7. 

[0012] When there is personal information such as a name, an address and a birth date 
of which at least one disclosure is possible, a personal information possession subject 
edits these using personal information input unit 1, and in addition, creates disclosure 
conditions such as a use permitter, the use purpose and the disclosure range (step 11) 
for each item of personal information as a disclosure regulations. For example, "names 
are permitted to be disclosed to every people" and "addresses may be disclosed to OO, 
Inc. as long as it is used as the purpose of user support, however, the disclosure range is 
limited to the personal information use subject's organization" etc. 

[0013] In the personal information registration section 2, a syntactic analysis is 
performed for the group which consists of inputted personal information and a 
disclosure use regulation, and the contents of a text described are read, and the 
information on the analysis result is registered in the secondary storage 3 which is a 
database (step 12). At this time, regarding personal information, an index which can 
search the values of each item of personal information and the items with a search key 
is created. Moreover, regarding disclosure use regulation, an index which can search 
disclosure objects such as items of personal information, a use permitter, the use 
purpose, the disclosure range, etc., is created. 

[0014] Using the retrieval condition input apparatus 4, as shown in Table 1, the 
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personal information use subject creates the use purpose, the disclosure range, etc. as 
request use regulation for every item of personal information to be used and sends them 
to the personal information retrieval section 5 (step 13). 

[0016] In the personal information retrieval section 5, the conditions of disclosure use 
regulation registered and the conditions of the request use regulation given as retrieval 
conditions are compared using an index and the group which consists of personal 
information and the disclosure use regulation which fulfill both conditions are searched 
(step 14). 

[0017] At this time, when a plurality of personal information are defined in the 
disclosure use regulation for every different information use subjects and disclosure 
conditions, selected disclosure of personal information is possible. For example, it is 
possible to specify "for the people who works at the same company, disclose telephone 
number 1 as home telephone number and for the other people, disclose the telephone 
number 2" or "if it is for the purpose of user support, the mail address 1 will be disclosed 
as a work e-mail address and if it is for the purpose of sending out direct mails, the mail 
address 2 is disclosed and if it is for the purpose of obtaining profit, nothing is 
disclosed." 

[0018] In the personal information presentation section 6, disclosed personal 
information is dynamically created based on a retrieval result by extracting the items of 
the personal information to be disclosed. In addition, for each item of the disclosed 
personal information, the use permission information is dynamically created based on 
disclosure use regulation and request use regulation. Then, the disclosed personal 
information and the use permission information are made into a group and managed 
and displayed on a display apparatus 7 ( Step 15). 

[0019] The use permission information is a use constraint which fulfills both conditions 
of the disclosure use regulation and the request use regulation which were mentioned 
above, and the items of personal information which are subject to use constraint, such 
as a use permitter, the original writer, the use purpose and the disclosure range, etc. are 
specified. Since the personal information obtained by personal information use subject 
is always managed as a pair with this use permission, an illegal use contrary to the 
intention of the original writer (personal information possession subject) can be 
restricted. 

[0020] Moreover, when "redistribution of disclosed personal information" is permitted in 
the use permission information, a personal information use subject can turn into a 
personal information possession subject by inputting a new disclosure use regulation 
from the personal information input apparatus 1 within a range permitted by use 



Our Ref. No.2003FJ567IDS 



permission information. 

[0021] In addition, a configuration such that a plurality of server sites which registered 
a set of groups which consist of personal information which can be disclosed and a 
disclosure use regulation exist iix a dispersed state and that parallel transmission of the 
retrieval request to the server sites can be made possible. 

[0022] Moreover, it is possible to acquire the disclosed personal information which can 
be redistributed from many personal information possession subjects registered in 
various server sites and create indexes, etc. within a range specified by the use 
permission information as a personal information use subject and provide services to 
inform which server site is the most efficient to ask for the requested personal 
information and carry out a retrieval to the other personal information use subject. 
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(57)Abstract: 

PROBLEM TO BE SOLVED: To restrict a subject to use 
personal information to use of it within a range permitted 
by use permission information. 

SOLUTION: The personal information possible to be 
disclosed is edited, disclosure conditions are created as 
disclosure use regulation for each item of the personal 
information by using a personal information input device 
1 by the subject to own the personal information. Syntax 
analysis is performed to a set consisting of the inputted 
personal information and the disclosure use regulation 
and its result is registered in a data base 3 by a personal 
information registering part 2. Request use regulation is 
created by using a retrieval condition input device 4 by 
the subject to own the personal information. A set 
consisting of the personal information to satisfy both 
registered conditions of the disclosure use regulation 
and the request use regulation and its disclosure use 
regulation is retrieved by a personal information 
retrieving part 5. Disclosed personal information is 
created based on a retrieval result, use permission information is dynamically created for each 
item of the disclosed personal information and the pieces of information are formed as a set 
and outputted to a display 7 by a personal information presenting part 6. 
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